On Sun, Feb 28, 2010 at 08:58:55AM -0800, Vince Valenti wrote:
> 
> 
> I'm actually no longer the maintainer of the port, but if you check
> sockstat, you will notice the second process is the one that is actually
> listening to the network, etc: 
> 
> # ps auxww|grep syslog
> root 29196 0.0 0.0
> 5320 2172 ?? I 8:40AM 0:00.00 /usr/local/sbin/syslog-ng -p
> /var/run/syslog.pid
> root 29197 0.0 0.0 5320 2432 ?? Ss 8:40AM 0:00.04
> /usr/local/sbin/syslog-ng -p /var/run/syslog.pid 
> 
> # sockstat|grep
> syslog
> root syslog-ng 29197 3 dgram /var/run/log
> root syslog-ng 29197 5
> stream /var/db/syslog-ng.ctl
> root syslog-ng 29197 6 dgram
> /var/run/logpriv
> root syslog-ng 29197 7 udp4 *:514 *:* 
> 
> My guess is that
> this is by design. In fact, I've checked syslog-ng on a Linux machine
> (gasp) and it also runs two processes: 
> 
> root 30648 0.0 0.0 29428 868 ? S
> 04:02 0:00 supervising syslog-ng 
> root 30649 0.0 0.0 35984 2404 ? Ss 04:02
> 0:06 /opt/syslog-ng/sbin/syslog-ng --no-caps 

IIRC I've also seen that on Solaris.

Attachment: pgpPO07AYYARD.pgp
Description: PGP signature

Reply via email to